Re: IDS requirement

[skill2die4 () secguru com]

> Can anyone email me a document on how IDS/IPS actually
> works.....with the terminology well explained.

IMHO, articles of your interest would be :

FAQ's
============
[FAQ] Sniffing (network wiretap, sniffer)
[FAQ] IDS

Terminology
=============
[AndyCuff] Intrusion Detection Terminology
[A.Cliff] Intrusion Detection Systems Terminology

Basic Papers
===============
[SecurityFocus] An Introduction to Intrusion Detection Systems
[SecurityFocus] Network Intrusion Detection Signatures
[SecurityFocus] Intrusion Detection: Filling in the Gaps
[Cisco] Intrusion Detection Planning Guide


links to all the above is availabe at,

http://www.secguru.com/index.php/content/category/6/145/115/
[ www.secguru.com -> Network Devices -> IDS ]


Also , visit Andy Cuff's site : http://www.networkintrusion.co.uk/
for much info ... :-)


HTH,

-=skillz=-

.

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------